How does vbulletin write in the database?

[NolF]

I should begin from the start. I?m making a ?simple? hack, my first proper one. Don't know much about php lang, queries and generally anything, but I tend to understand programming languagues. The idea is quite simple. The add adds a template below the survey. The purpose of this is to suggests similar threads to other people. The users with X amount of posts can send suggestions, and the people with X posts and Y suggestions can also delete suggestions.

Basically the users enters a title and the last set of numbers of the post (Need to filter this to prevent sploits), and this is entered in a second tample with the form <a href=?showthread?t=xxxx?>titlez</a>. The hack also records the userid and adds a field on the user table to count the number of suggestions and display it on postbit and postbit_legacy templates.

So far so good.

I have made part of the core of the hack, and the form template, but now I?m stuck. I?ve been studing vbulletin and hacks to see how vbulletin writes staff in the created table and into the desired field. I think it has to do with $vbulletin->GPC['newyear']) but don?t know how to adapt it to my hack.

I would appreciate if anyone could tell me how to get the data from the form (template) to the database

Attached I put the template and what I?ve ?written? of the hack.

Thank you
NolF

[NolF]

up
common please, share some wisdom with those in need ^^

[nevetS]

If you are looking to insert your own data into the vbulletin database, it is done with $db->query_write() commands - basically it's a wrapper function that you can pass your sql statements to. Like for instance, I have a custom mod that I'm using to highlight a given post - the syntax is simple:

$db->query_write("UPDATE ".TABLE_PREFIX."post SET highlight = 1 where postid in (".$postids.")")

It is very important that you properly escape your statements, and verify that any variables you are passing are valid. Not doing so leaves you wide open to a SQL Injection attack.

[NolF]

Thanks for the help, but is not a query update what I'm trying to undertand and use, is more like newthread and newreply.php they don't use queries (as far as I can see) to get the info into de db. The problem is, I don't undertand how this is perform, although my guess and bet is on something on the lines of $vbulletin->GPC['newyear']) (for example). If it is this, I would appreciate if someone could explain me how it works, and if not, guide me to right path (how it is done).

thanks mates ^^